Today, the President of the Hellenic DPA, Konstantinos Menoudakos, submitted the 2024 Annual activity report to the President of the Hellenic Parliament, Nikitas Kaklamanis.
In his statement, Mr Menoudakos noted the following:
“In 2024, the Authority consistently fulfilled the responsibilities and tasks assigned to it under the GDPR, other European legislation, and national law. This was achieved despite persistent challenges related to limited resources and infrastructure. Among its many activities, the Hellenic DPA dealt with complex matters and issued important decisions and opinions, while placing particular emphasis on raising awareness among data subjects, as well as data controllers and processors. 46 decisions were issued concerning violations of the law. A total of 1,820 complaints were lodged (compared to 1,414 in 2023), and 1,422 were handled (up from 883 in 2023). In addition, fines amounting to EUR 4,302,149 were imposed by 22 decisions.”
“I would like to clarify that the reference to fines is not intended to present a positive evaluation of the Authority’s work, but rather to highlight that, in 2024 — six years after the General Regulation came into force — infringements of compliance rules are still observed. At the same time, the assimilation of the principles underpinning data protection legislation remains an ongoing challenge for organisations and businesses, including the public sector itself. Nevertheless, the primary objective of the Authority, in line with the overall spirit of data protection legislation, is not to impose sanctions. Sanctions are applied as a punitive measure with a deterrent purpose.”
The President of the Hellenic DPA further stated:
“The Authority does not shape policy but contributes to ensuring that policies are compatible with the institutional framework. In a state governed by the rule of law, all processing of personal data must serve a specific purpose and be provided for by law.”
“In the critical field of awareness-raising and information,” Mr Menoudakos said, “the Authority utilised EU funds and successfully completed the ‘byDefault’ project in 2024. The main objectives were, first, to create a dedicated platform for providing specialised information to DPOs and professionals, and second, to develop educational material on data protection issues for primary and secondary school students and teachers.”
“However, in order for the Authority to fully carry out the multidimensional mandate entrusted to it, legal safeguards alone are not sufficient. It is, of course, essential that it exercises its powers consistently, vigorously, objectively, and with institutional self-awareness. It was in this spirit —and in this manner— that the Authority operated in 2024, the year to which this report refers, as well as in previous years. Nonetheless, it remains of paramount importance that the legislative and executive branches take concrete steps to ensure the conditions necessary for the Authority’s effective functioning. This includes upgrading the organisational and legislative framework and significantly strengthening the resources available to it for carrying out its mission.”
Konstantinos Menoudakos, two days before stepping down as President of the Authority due to his resignation, expressed his gratitude to the President of Parliament, Nikitas Kaklamanis, and, through him, to the Hellenic Parliament. He expressed the hope that "the State will support the strong efforts of the Ηellenic DPA to meet the growing expectations of citizens for the protection of their fundamental rights."
On his part, the President of the Hellenic Parliament, Nikitas Kaklamanis, upon receiving the Report, expressed his gratitude on behalf of the Hellenic Parliament to the President of the Authority for the work he has carried out over the years, describing him as "an emblematic figure in the field of Justice."
Mr. Kaklamanis emphasized to Mr. Menoudakos that he will duly forward the Report to the Special Permanent Committee on Institutions and Transparency, so that it may be studied and discussed.
Department of Communication and Public Relations
